8.1 Configuring Windows to use a Heimdal KDC

You need the command line program called ksetup.exe. This program comes with the Windows Support Tools, available from either the installation CD-ROM (SUPPORT/TOOLS/SUPPORT.CAB), or from Microsoft web site. Starting from Windows 2008, it is already installed. This program is used to configure the Kerberos settings on a Workstation.

Ksetup store the domain information under the registry key:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA\Kerberos\Domains.

Use the kadmin program in Heimdal to create a host principal in the
Kerberos realm.

unix% kadmin
kadmin> ank --password=password host/datan.example.com

The name `datan.example.com' should be replaced with DNS name of
the workstation.

You must configure the workstation as a member of a workgroup, as opposed
to a member in an NT domain, and specify the KDC server of the realm
as follows: